dissect.database 1.1.dev11__tar.gz → 1.1.dev12__tar.gz

{dissect_database-1.1.dev11/dissect.database.egg-info → dissect_database-1.1.dev12}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.database
-Version: 1.1.dev11
+Version: 1.1.dev12
 Summary: A Dissect module implementing parsers for various database formats, including Berkeley DB, Microsofts Extensible Storage Engine (ESE) and SQLite3
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: Apache-2.0

{dissect_database-1.1.dev11 → dissect_database-1.1.dev12}/dissect/database/ese/ntds/ntds.py

@@ -7,7 +7,7 @@ from dissect.database.ese.ntds.database import Database
 if TYPE_CHECKING:
     from collections.abc import Iterator
 
-    from dissect.database.ese.ntds.objects import Computer, DomainDNS, Group, Object, Server, User
+    from dissect.database.ese.ntds.objects import Computer, DomainDNS, Group, GroupPolicyContainer, Object, Server, User
     from dissect.database.ese.ntds.objects.trusteddomain import TrustedDomain
     from dissect.database.ese.ntds.pek import PEK
 
@@ -89,3 +89,7 @@ class NTDS:
     def trusts(self) -> Iterator[TrustedDomain]:
         """Get all trust objects from the database."""
         yield from self.search(objectClass="trustedDomain")
+
+    def group_policies(self) -> Iterator[GroupPolicyContainer]:
+        """Get all group policy objects (GPO) objects from the database."""
+        yield from self.search(objectClass="groupPolicyContainer")

{dissect_database-1.1.dev11 → dissect_database-1.1.dev12/dissect.database.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.database
-Version: 1.1.dev11
+Version: 1.1.dev12
 Summary: A Dissect module implementing parsers for various database formats, including Berkeley DB, Microsofts Extensible Storage Engine (ESE) and SQLite3
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: Apache-2.0

{dissect_database-1.1.dev11 → dissect_database-1.1.dev12}/tests/ese/ntds/test_ntds.py

@@ -4,7 +4,7 @@ from typing import TYPE_CHECKING
 
 import pytest
 
-from dissect.database.ese.ntds.objects import Computer, Group, Server, SubSchema, User
+from dissect.database.ese.ntds.objects import Computer, Group, GroupPolicyContainer, Server, SubSchema, User
 from dissect.database.ese.ntds.util import SAMAccountType
 
 if TYPE_CHECKING:
@@ -262,3 +262,16 @@ def test_all_memberships(large: NTDS) -> None:
     for user in large.users():
         # Just iterate all memberships to see if any errors occur
         list(user.groups())
+
+
+def test_group_policies(goad: NTDS) -> None:
+    gpos: list[GroupPolicyContainer] = sorted(goad.group_policies(), key=lambda x: x.distinguished_name)
+    assert len(gpos) == 5
+    assert isinstance(gpos[0], GroupPolicyContainer)
+    assert [x.distinguished_name for x in gpos] == [
+        "CN={117DC7AC-6832-4B21-ABFD-C56679BC3626},CN=POLICIES,CN=SYSTEM,DC=NORTH,DC=SEVENKINGDOMS,DC=LOCAL",
+        "CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=NORTH,DC=SEVENKINGDOMS,DC=LOCAL",
+        "CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=SEVENKINGDOMS,DC=LOCAL",
+        "CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=NORTH,DC=SEVENKINGDOMS,DC=LOCAL",
+        "CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=POLICIES,CN=SYSTEM,DC=SEVENKINGDOMS,DC=LOCAL",
+    ]